Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2010-4255HistoryJan 25, 2011 - 1:00 a.m.
CVE-2010-4255
2011-01-2501:00:01
Debian Security Bug Tracker
security-tracker.debian.org
13
6.1 Medium
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:A/AC:L/Au:N/C:N/I:N/A:C
0.002 Low
EPSS
Percentile
58.4%
The fixup_page_fault function in arch/x86/traps.c in Xen 4.0.1 and earlier on 64-bit platforms, when paravirtualization is enabled, does not verify that kernel mode is used to call the handle_gdt_ldt_mapping_fault function, which allows guest OS users to cause a denial of service (host OS BUG_ON) via a crafted memory access.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | xen | < 4.0.1-2 | xen_4.0.1-2_all.deb |
| Debian | 11 | all | xen | < 4.0.1-2 | xen_4.0.1-2_all.deb |
| Debian | 999 | all | xen | < 4.0.1-2 | xen_4.0.1-2_all.deb |
| Debian | 13 | all | xen | < 4.0.1-2 | xen_4.0.1-2_all.deb |
Related
nvd
nvd
CVE-2010-4255
2011-01-25 01:00:01
cvelist
cvelist
CVE-2010-4255
2011-01-25 00:00:00
ubuntucve
ubuntucve
CVE-2010-4255
2011-01-25 00:00:00
prion
prion
Memory corruption
2011-01-25 01:00:00
cve
cve
CVE-2010-4255
2011-01-25 01:00:01
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:55:45
redhat
redhat
openvas
openvas
RedHat Update for Red Hat Enterprise Linux 5.6 kernel RHSA-2011:0017-01
2011-01-14 00:00:00
Oracle: Security Advisory (ELSA-2011-0017)
2015-10-06 00:00:00
RedHat Update for Red Hat Enterprise Linux 5.6 kernel RHSA-2011:0017-01
2011-01-14 00:00:00
nessus
nessus
RHEL 5 : kernel (RHSA-2011:0017)
2011-01-14 00:00:00
Oracle Linux 5 : Oracle / Linux / 5.6 / kernel (ELSA-2011-0017)
2023-09-07 00:00:00
oraclelinux
oraclelinux
Oracle Linux 5.6 kernel security and bug fix update
2011-01-20 00:00:00
vmware
vmware
VMware ESXi and ESX updates to third party libraries and ESX Service Console
2011-10-12 00:00:00
VMware ESX third party updates for Service Console packages glibc and dhcp
2011-10-12 00:00:00
6.1 Medium
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:A/AC:L/Au:N/C:N/I:N/A:C
0.002 Low
EPSS
Percentile
58.4%
Related for DEBIANCVE:CVE-2010-4255